CVE-2026-64597

Impact

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2_close() replay A response-bearing attempt can return a replayable error and free its response buffer. If SMB2_close_init() fails before the next send, cleanup retains the previous buffer type and frees that response again. Reset response bookkeeping before each attempt to prevent the stale free.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

Weakness classification

References

• NVD record
• CVE.org record
• https://git.kernel.org/stable/c/037511726228aaf165c7067ff2bfc88eaecdf1f3
• https://git.kernel.org/stable/c/0aa97edf7c347c0f54e7e60c4740574b8120c66a
• https://git.kernel.org/stable/c/b18ed621dbfceecea5539848cddcb9272c9a61e1
• https://git.kernel.org/stable/c/d15d83125007f673aec4323e1bbbaaffbe87ea13
• https://git.kernel.org/stable/c/f96e1cdcb63ed3321142ff2fcdf784e32cda8fee